Overview

overview

10

Static

static

3

e74cead4e2...18.exe

windows7-x64

10

e74cead4e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e74cead4e271b26a3d03d28f79a63a36_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240408-mz3dksag7x

  • MD5

    e74cead4e271b26a3d03d28f79a63a36

  • SHA1

    edced4cd6f79fcf43656a5f55fcc8ac15424d2e2

  • SHA256

    2008c37f62217b0a5eff1811234bd6640e56164f0d028f3b53d490668dcf257c

  • SHA512

    5d28d87435d6a691e747166f4b1aad9a41ab548f9f13ef82fe030f0d003fb10f5dc6ca428ba5d1ff64b2dcbaa6986dfa8a5fd7a3e6ebe961cbe2ad9bb551ba2a

  • SSDEEP

    12288:UZWtI6RkderQZb+md4w1UArKuxerQZb+md4w1UZCPZX:UuhaderQZb+md4wmAverQZb+md4wm0Z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e74cead4e271b26a3d03d28f79a63a36_JaffaCakes118

    • Size

      1.1MB

    • MD5

      e74cead4e271b26a3d03d28f79a63a36

    • SHA1

      edced4cd6f79fcf43656a5f55fcc8ac15424d2e2

    • SHA256

      2008c37f62217b0a5eff1811234bd6640e56164f0d028f3b53d490668dcf257c

    • SHA512

      5d28d87435d6a691e747166f4b1aad9a41ab548f9f13ef82fe030f0d003fb10f5dc6ca428ba5d1ff64b2dcbaa6986dfa8a5fd7a3e6ebe961cbe2ad9bb551ba2a

    • SSDEEP

      12288:UZWtI6RkderQZb+md4w1UArKuxerQZb+md4w1UZCPZX:UuhaderQZb+md4wmAverQZb+md4wm0Z

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks